# Make login screen accessible for keepass/ChromeIPass

**URL:** https://meta.discourse.org/t/make-login-screen-accessible-for-keepass-chromeipass/58288
**Category:** UX
**Created:** [March 3, 2017, 9:01am UTC](https://meta.discourse.org/t/make-login-screen-accessible-for-keepass-chromeipass/58288 "2017-03-03T09:01:44Z")
**Posts on this page:** 12
**Page:** 1

<div class="post-metadata">

### Author: ![tophee](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/tophee/32/73406_2.png) [@tophee](https://meta.discourse.org/u/tophee)
#### Post date: [March 3, 2017, 9:01am UTC](https://meta.discourse.org/t/make-login-screen-accessible-for-keepass-chromeipass/58288/1 "2017-03-03T09:01:45Z")

</div>

[KeePas](http://keepass.info/)s is a (if not _the_) open source password manager. To make it fill in login credentials on websites, [ChromeIPass](https://chrome.google.com/webstore/detail/chromeipass/ompiailgknfdndiefoaoiligalphfdae?hl=en) is probably the most commonly used Chrome-plugin. It even catches most AJAX login screens. Unfortunately, it doesn’t work with the Discourse login screen.

I am not sure what Discourse does differently than most AJAX generated login screens, but it would be great if it could be tweaked so that it works with ChromeIPass…

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [March 3, 2017, 9:05am UTC](https://meta.discourse.org/t/make-login-screen-accessible-for-keepass-chromeipass/58288/2 "2017-03-03T09:05:07Z")

</div>

Works fine with the built in browser login support, @techapj can you check current version against Safari, Firefox, Chrome just to be sure?

---

<div class="post-metadata">

### Author: ![tophee](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/tophee/32/73406_2.png) [@tophee](https://meta.discourse.org/u/tophee)
#### Post date: [March 3, 2017, 9:18am UTC](https://meta.discourse.org/t/make-login-screen-accessible-for-keepass-chromeipass/58288/3 "2017-03-03T09:18:34Z")

</div>

> [@codinghorror](#):
>
> Works fine with the built in browser login support,

I know, but relying on your browser as your password manager [is not advisable](https://www.wired.com/2016/08/browser-password-manager-probably-isnt-enough/). But leaving the security/privacy debate aside, I just thought that since ChromeIPass works on most other logins, it can’t be too difficult to tweak Discourse to work with it too…

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [March 3, 2017, 9:20am UTC](https://meta.discourse.org/t/make-login-screen-accessible-for-keepass-chromeipass/58288/4 "2017-03-03T09:20:22Z")

</div>

Our priority is to support the browser’s built in support. The third party tools should follow the same logic paths as the browsers. If they don’t, that is a fault of the tool.

---

<div class="post-metadata">

### Author: ![gerhard](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/gerhard/32/119479_2.png) [@gerhard](https://meta.discourse.org/u/gerhard)
#### Post date: [March 3, 2017, 10:03am UTC](https://meta.discourse.org/t/make-login-screen-accessible-for-keepass-chromeipass/58288/5 "2017-03-03T10:03:30Z")

</div>

It’s a [known limitation of ChromelPass](https://github.com/pfn/passifox/blob/master/documentation/chromeIPass.md#72-auto-detection-of-input-fields), but there’s a simple workaround.

> ### 7.2 Auto detection of input fields

> #### 7.2.1 Problem
> 
> The detection does only detect fields which are **visible** when this function is called.  
>   
> It is only one time called automatically: After loading of the page finished.

> New input fields which are created with JavaScript or with an AJAX-call cannot be detected, because they get visible **after** the auto detection was called.

> For example an overlay for signin or signup could possibly not auto detected by chromeIPass because either the input fields are created just-in-time or they are hidden to the user while auto detection is running.

> #### 7.2.2 Solution
> 
> When it did not detect any username + password field combination you can click on the browser icon of chromeIPass and press the button “Redetect credential fields”.

> You can also focus the visible username field or password field and press **Ctrl+Shift+U**. This will start a redetection for the focused field, too.

---

<div class="post-metadata">

### Author: ![tophee](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/tophee/32/73406_2.png) [@tophee](https://meta.discourse.org/u/tophee)
#### Post date: [March 3, 2017, 10:11am UTC](https://meta.discourse.org/t/make-login-screen-accessible-for-keepass-chromeipass/58288/6 "2017-03-03T10:11:44Z")

</div>

> [@gerhard](#):
>
> New input fields which are created with JavaScript or with an AJAX-call cannot be detected, because they get visible after the auto detection was called.  
> For example an overlay for signin or signup could possibly not auto detected by chromeIPass because either the input fields are created just-in-time or they are hidden to the user while auto detection is running.

Very useful information! But what I don’t understand then, is: why does it nevertheless work on most of those login pages that create a screen overlay for login (using AJAX, I assume)?

---

<div class="post-metadata">

### Author: ![gerhard](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/gerhard/32/119479_2.png) [@gerhard](https://meta.discourse.org/u/gerhard)
#### Post date: [March 3, 2017, 10:16am UTC](https://meta.discourse.org/t/make-login-screen-accessible-for-keepass-chromeipass/58288/7 "2017-03-03T10:16:57Z")

</div>

It’s possible that those sites just hide the input fields until they are needed. This allows ChromelPass to detect them when the page loads. AFAIK, Discourse creates the login form only when it’s needed.

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [March 3, 2017, 11:38am UTC](https://meta.discourse.org/t/make-login-screen-accessible-for-keepass-chromeipass/58288/8 "2017-03-03T11:38:28Z")

</div>

No, there is a hidden login form in the HTML to trigger browser auto fill. Take a look.

---

<div class="post-metadata">

### Author: ![ljpp](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/ljpp/32/96506_2.png) [@ljpp](https://meta.discourse.org/u/ljpp)
#### Post date: [March 3, 2017, 6:36pm UTC](https://meta.discourse.org/t/make-login-screen-accessible-for-keepass-chromeipass/58288/9 "2017-03-03T18:36:23Z")

</div>

Sorry OT:

LastPass works 98% of the times (Chrome), but for a reason unknown occasionally fails to fill the fields.

---

<div class="post-metadata">

### Author: ![tophee](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/tophee/32/73406_2.png) [@tophee](https://meta.discourse.org/u/tophee)
#### Post date: [March 3, 2017, 7:12pm UTC](https://meta.discourse.org/t/make-login-screen-accessible-for-keepass-chromeipass/58288/10 "2017-03-03T19:12:23Z")

</div>

That gives me the idea that discourse could provide another way to mark posts: mark as OT. LOL

---

<div class="post-metadata">

### Author: ![techAPJ](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/techapj/32/342990_2.png) [@techAPJ](https://meta.discourse.org/u/techAPJ)
#### Post date: [March 5, 2017, 4:43pm UTC](https://meta.discourse.org/t/make-login-screen-accessible-for-keepass-chromeipass/58288/11 "2017-03-05T16:43:03Z")

</div>

> [@codinghorror](#):
>
> @techapj can you check current version against Safari, Firefox, Chrome just to be sure?

Verified on my MacBook that latest version of Safari, Firefox and Chrome offers to save password.

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [May 11, 2017, 7:21pm UTC](https://meta.discourse.org/t/make-login-screen-accessible-for-keepass-chromeipass/58288/12 "2017-05-11T19:21:43Z")

</div>


